CVE-2017-15941

Cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-16878

Cross-site scripting XSS vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration...

CVE-2017-15941

CVE-2017-15941 is a cross-site scripting vulnerability in PAN-OS GlobalProtect. The issue permits a remote attacker to inject arbitrary script/HTML when the GlobalProtect gateway or portal is configured. Affected PAN-OS versions: 6.1.x before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and ...

CVE-2017-16878

CVE-2017-16878 is a Cross-site scripting (XSS) vulnerability in the Captive Portal of Palo Alto Networks PAN-OS, exploitable remotely via an unspecified configuration on versions before 8.0.7. The issue allows an attacker to inject arbitrary web script/HTML in the portal. Remediation per the desc...

CVE-2017-17841

CVE-2017-17841 affects PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7 where SSL Decryption with RSA or a GlobalProtect portal/gateway can leak TLS plaintext via a Bleichenbacher padding oracle (ROBOT). PAN-OS mitigations include upgrading to PAN-OS 7.1.15 or 8.0.7 (and later), or applying workarounds su...

CVE-2017-15941: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-17841: Undefined Security Weakness

Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

CVE-2017-16878: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration...

Information about Meltdown and Spectre findings

Palo Alto Networks is aware of recent vulnerability disclosures, known as Meltdown and Spectre, that affect modern CPU architectures. At this time, our findings show that these vulnerabilities pose no increased risk to Palo Alto Networks PAN-OS devices. CVE-2017-5715, CVE-2017-5753, and...

Information about Meltdown and Spectre findings

Palo Alto Networks is aware of recent vulnerability disclosures, known as Meltdown and Spectre, that affect modern CPU architectures. At this time, our findings show that these vulnerabilities pose no increased risk to Palo Alto Networks PAN-OS devices. CVE-2017-5715, CVE-2017-5753, and...

Cross Site Scripting in PAN-OS Captive Portal

A vulnerability exists in PAN-OS Captive Portal that could allow for a cross-site scripting XSS attack to be performed against clients viewing the captive portal page when configured in a certain way. Ref PAN-85238 / CVE-2017-16878 Successful exploitation of this issue may allow an attacker to...

Cross Site Scripting Vulnerability in PAN-OS GlobalProtect

A vulnerability exists in PAN-OS GlobalProtect when either the gateway or the portal are configured. This issue could allow for a cross-site scripting XSS attack. Ref PAN-81586 / CVE-2017-15941 Successful exploitation of this issue may allow an attacker to inject arbitrary javascript or HTML. Thi...

Cross Site Scripting Vulnerability in PAN-OS GlobalProtect

A vulnerability exists in PAN-OS GlobalProtect when either the gateway or the portal are configured. This issue could allow for a cross-site scripting XSS attack. Ref PAN-81586 / CVE-2017-15941 Successful exploitation of this issue may allow an attacker to inject arbitrary javascript or HTML. Thi...

Cross Site Scripting in PAN-OS Captive Portal

A vulnerability exists in PAN-OS Captive Portal that could allow for a cross-site scripting XSS attack to be performed against clients viewing the captive portal page when configured in a certain way. Ref PAN-85238 / CVE-2017-16878 Successful exploitation of this issue may allow an attacker to...

ROBOT attack against PAN-OS

ROBOT is an attack that affects the TLS RSA key exchange and could lead to decryption of captured sessions if the TLS server originally serving said captured session is still alive, vulnerable and using the same private key. PAN-89936 / CVE-2017-17841 While SSL Decryption and GlobalProtect are...

ROBOT attack against PAN-OS

ROBOT is an attack that affects the TLS RSA key exchange and could lead to decryption of captured sessions if the TLS server originally serving said captured session is still alive, vulnerable and using the same private key. PAN-89936 / CVE-2017-17841 While SSL Decryption and GlobalProtect are...

PT-2018-6580

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS versions 6.1 through 6.1.19 Palo Alto Networks PAN-OS versions 7.1 through 7.1.14 Palo Alto Networks PAN-OS versions 8.0.x through 8.0.6-h3 Description: The issue might allow remote attackers to decrypt TLS ciphertex...

PT-2018-6031

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS versions prior to 6.1.19 Palo Alto Networks PAN-OS versions 7.0.x prior to 7.0.19 Palo Alto Networks PAN-OS versions 7.1.x prior to 7.1.14 Palo Alto Networks PAN-OS versions 8.0.x prior to 8.0.7 Description: A...

PT-2018-6355

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 8.0.7 Description: A cross-site scripting XSS issue exists in the Captive Portal function, allowing remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration. This could allow ...

Palo Alto Networks PAN-OS Cookie Injection Vulnerability

Palo Alto Networks PAN-OS versions before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface. !/bin/bash Exploit Title: Fake Cookie Injection PoC - CVE-2017-15944 Date: December...